Threats Tagged 'cve-2026-33478'
View all threats tagged with 'cve-2026-33478'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-33478'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-33478 is a critical remote code execution vulnerability in WWBN AVideo versions up to 26.0. It involves a chain of flaws in the CloneSite plugin that allows unauthenticated attackers to access secret keys, dump the database including weakly hashed admin passwords, and ultimately execute arbitrary OS commands via an injection in the rsync command. The vulnerability requires no authentication or user interaction and affects confidentiality, integrity, and availability severely. A patch is available in commit c85d076375fab095a14170df7ddb27058134d38c. Organizations using AVideo should urgently update to a fixed version to prevent exploitation. The CVSS score is 10.0, reflecting the critical nature of this flaw. Join the discussion | CVE Database V5 | 03/23/2026, 14:01:19 UTC Added: 03/23/2026, 14:30:54 UTC |
Showing 1 to 1 of 1 result